--- title: "Blog — Resizes" url: "https://resiz.es/blog" description: "Notes on platform engineering, cloud infrastructure, and building better software. Written by the people doing the work." --- Resizes journal · 27 articles # Ideas from the _inside._ Notes on platform engineering, cloud infrastructure, and building better software. Written by the people doing the work. [![](https://resiz.es/assets/blog/img/01-09-2026_ingress-to-gateway.jpg)](https://resiz.es/blog/ingress-to-gateway-migration) 1 September 20266 min read ## [Ingress NGINX is retiring — how we cut over to Envoy Gateway in 3 days (without downtime)](https://resiz.es/blog/ingress-to-gateway-migration) SIG Network retires Ingress NGINX in March 2026. Scope, the oauth2-proxy bugs we caught before DNS moved, what ingress2gateway does not cover, and how Resizes runs the same cutover for you. [Ramiro Alvarez](https://resiz.es/blog/authors/ramiro) [![](https://resiz.es/assets/blog/img/20-08-2026_-_Agen-chat_spend.jpg)](https://resiz.es/blog/one-message-dozens-of-calls) 20 August 20268 min read ## [One message, dozens of calls: how we measured and cut agent-chat spend](https://resiz.es/blog/one-message-dozens-of-calls) A chat message is not one request — it is a loop of model calls. How we attributed LiteLLM spend, saw the whole proxy in Grafana, and cut tokens without breaking the agent. [Pablo Suárez](https://resiz.es/blog/authors/pablo) [![](https://resiz.es/assets/blog/img/aws-secrets-manager-to-1password.jpg)](https://resiz.es/blog/aws-secrets-manager-to-1password) 26 July 20266 min read ## [Stop paying $0.40 per secret: cut AWS Secrets Manager cost and run secrets more efficiently](https://resiz.es/blog/aws-secrets-manager-to-1password) What Secrets Manager really costs at 50, 500, and 5,000 secrets — and how we help organisations move to a portable, cheaper operating model with 1Password and External Secrets. [Ramiro Alvarez](https://resiz.es/blog/authors/ramiro) [![](https://resiz.es/assets/blog/img/blog/kubernetes-v1-36/preview.jpg)](https://resiz.es/blog/kubernetes-v1-36-mutable-pod-resources) 13 May 20264 min read ## [Kubernetes v1.36 - Mutable Pod Resources for Suspended Jobs](https://resiz.es/blog/kubernetes-v1-36-mutable-pod-resources) Batch and ML workloads often need resources that aren't known at Job creation time. The optimal allocation depends on cluster capacity, queue priorities, and hardware availability — all of which ca… [Guille Vigil](https://resiz.es/blog/authors/guille) [![](https://resiz.es/assets/blog/img/blog/team-topologies/preview.jpg)](https://resiz.es/blog/team-topologies-platform-team) 28 April 20265 min read ## [Team Topologies - How to Structure a Platform Team That Actually Works](https://resiz.es/blog/team-topologies-platform-team) Platform engineering is now a critical function in modern software organizations. Gartner predicts that 80% of large engineering organizations will have dedicated platform teams by 2026. But simply… [Laura Álvarez](https://resiz.es/blog/authors/laura) [![](https://resiz.es/assets/blog/img/github-stacked-prs.png)](https://resiz.es/blog/github-stacked-prs) 17 April 20264 min read ## [GitHub Stacked PRs - How to Split Large Changes into Small PRs Without Losing Your Mind](https://resiz.es/blog/github-stacked-prs) The problem of giant PRs that nobody wants to review is universal. You open a pull request with 50 modified files and think: "this is going to take days to review." Reviewers lose context, conflict… [Guille Vigil](https://resiz.es/blog/authors/guille) [![](https://resiz.es/assets/blog/img/2025-11-10-renovate/thumbnail.png)](https://resiz.es/blog/automating-dependency-updates-renovate-bot) 10 November 20257 min read ## [Automating Dependency Updates with Renovate Bot (for Any Language)](https://resiz.es/blog/automating-dependency-updates-renovate-bot) Automating Dependency Updates with Renovate Bot (for Any Language) Keeping dependencies up to date is one of those things that everyone agrees is important… and yet no one enjoys doing. Between ver… [Gonzalo Suárez](https://resiz.es/blog/authors/gonza) [![](https://resiz.es/assets/blog/img/2025-10-27-iam-identity-center/image.png)](https://resiz.es/blog/iam-identity-center) 28 October 20257 min read ## [Automating AWS IAM Identity Center with Terraform for Multi-Account Environments](https://resiz.es/blog/iam-identity-center) Automating AWS IAM Identity Center with Terraform in Multi-Account Environments Managing access in AWS can seem simple at first: a few accounts, a handful of users, and permissions that are easy to… [Lucía López](https://resiz.es/blog/authors/lucia) [![](https://resiz.es/assets/blog/img/2025-09-24-static-code-analysis/thumbnail.png)](https://resiz.es/blog/static-code-analysis) 8 October 20255 min read ## [Where Code Meets Platform: Baking Security Into Every Build](https://resiz.es/blog/static-code-analysis) Shift-left Philosophy: Why Security Matters You might remember the recent supply chain attack that hit NPM packages — maybe your team even felt the impact. It was a good reminder that one vulnerabl… [Gonzalo Suárez](https://resiz.es/blog/authors/gonza) [![](https://resiz.es/assets/blog/img/2025-07-04-tcp-udp/image.png)](https://resiz.es/blog/open-tcp-udp-same-port) 4 July 20252 min read ## [Easily open TCP and UDP protocols on the same port](https://resiz.es/blog/open-tcp-udp-same-port) If you’ve ever tried to expose both TCP and UDP on the same port using Kubernetes with AWS Load Balancers, you’ve probably run into a common limitation: you can only choose one protocol per port, w… [Lucía López](https://resiz.es/blog/authors/lucia)